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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1 308. 

1 . £3 This communication is responsive to 19 December 2005 . 

2. ^ The allowed claim(s) is/are 31-63 (renumbered 1-33) . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1 . □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. Kl CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper NoVMail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 
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DETAILED ACTION 

1 . Text of all the office actions previously forwarded to the applicant as well as all the responses to; 
such office actions has been incorporated by reference. 

• Claims 1-31 have been canceled. 

• Claims 31 , 35, 36, 39, 41 , 45, 46, 49, 51 , 55, 56, 61 , 62, and 63 have been amended. 

• Claims 31 -63 are allowed. 

Drawings 

2. New corrected drawings in compliance with 37 CFR 1.121(d) are required in this application 
because the drawing submitted are informal drawings. Applicant is advised to employ the services of a 
competent patent draftsperson outside the Office, as the U.S. Patent and Trademark Office no longer 
prepares new drawings. The corrected drawings are required in reply to the Office action to avoid 
abandonment of the application. The requirement for corrected drawings will not be held in abeyance. 

Examiner's Amendment 

3. An examiner's amendment to the record appears below. Should the changes and/or additions be 
unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure 
consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee. 

4. Authorization for this examiner's amendment was given in an interview with attorney James R. ; 
Miner conducted via telephone on 2 March 2006. 

5. The examiner under agreement by the attorney representing the applicant has amended claims \ 
31 , 35, 36, 39, 41 , 45, 46, 49, 51 , 55, 56, 61 , 62, and 63. The claims in the application has been amended 
as follow: 

31 . (Currently Amended) A method for conducting a transaction between a first computer system ■ 
and a second computer system, the method comprising the steps of: 
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(a) receiving in the second computer system a request from a user of the first computer system to 
download data from the second computer system , the data to be encrypted with an encryption key prior to 
being downloaded : 

(b) determining by the second computer system whether the request represents a new transaction 6r 
an incomplete transaction by comparing a first value stored in the first computer system with a part of a • 
second value stored in the second system , the first value being a portion of the encryption key, the 
second value being a whole portion of the encryption key : and 

(c) if wherein the request represents an incomplete transaction indicated by the portion of the 
encryption key stored in the first computer not matching any part of the whole portion of the encryption : 
key stored in the second computer, and completing the incomplete transaction, wherein the user is not 
charged duplicate fees associated with starting a new transaction completing the incomplete transaction ; 

32. (Previously Presented) The method of claim 31 wherein the first system comprises a client 
system and the second system comprises a server system. 

33. (Previously Presented) The method of claim 32 wherein the first value of the client system is 
stored in a persistent client-side data file. 

34. (Previously Presented) The method of claim 33 wherein the persistent client-side data file 
comprises a cookie. 

35. (Currently Amended) The method of claim 34 wherein step b) further comprises: 

b1 ) allowing the server system to compare the first value in the cookie with a part of the second value 

in the server system. 
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36. (Currently Amended) The method of claim 31 , wherein the request represents a new 
transaction if the first value does not match a part of the second value, the method further comprising: 

d) if the request represents a new transaction, generating a new encryption key by the second 
system, wherein the new encryption key is associated with the new transaction; 

e) storing a first portion of the new encryption key in the first computer system as the first value; and 

f) storing the whole new encryption key on the second computer system as the second value. 

37. (Previously Presented) The method of claim 36 further comprising: 

g) encrypting the requested data with the whole new encryption key; 

h) transmitting the encrypted data from the second computer system to the first computer system; ■ 
and 

i) after the encrypted data has been transmitted, sending a remaining portion of the new encryption 
key from the second computer system to the first computer system, 

wherein the first computer system combines the first portion and the remaining portion of the new 
encryption key to form the whole new encryption key and utilizes the whole new encryption key to decrypt 
the encrypted data. 

38. (Previously Presented) The method of claim 37 further comprising: 

j) after the encrypted data has been transmitted and prior to sending the remaining portion of the 
new encryption key, allowing the user to provide payment for the whole new encryption key. 

39. (Currently Amended) The method of claim 31 , wherein the first value is a first portion of an 
encryption key and the second value is a whole encryption key, and step c) further comprises: 
c1) encrypting the requested data with the whole encryption key; 

c2) transmitting the encrypted data from the second computer system to the first computer system; 
and 
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c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key 
from the second computer system to the first computer system, whereby the first computer system : 
combines the first portion and the remaining portion of the encryption key to form the whole 
encryption key and utilizes the whole encryption key to decrypt the encrypted data. 

40. (Previously Presented) The method of claim 39, wherein step (c) further comprises: 

c4) after the encrypted data has been transmitted and prior to sending the remaining portion of the 

encryption key, allowing the user to provide payment for the whole encryption key. . 

41 . (Currently Amended) A system for conducting a transaction between a first computer system ; 
and a second computer system, the system comprising: 

means in the second computer system for receiving a request from a user of the first computer system to 
download data from the second computer system , the data to be encrypted with an encryption key prior to 
being downloaded : 

means for determining by the second computer system whether the request represents a new transaction 
or an incomplete transaction by comparing a first value stored in the first computer system with a part of a 
second value stored in the second system , the first value being a portion of the encryption key, the 
second value being a whole portion of the encryption key : and 

means for completing the incomplete transaction if the request represents an incomplete transaction , the 
incomplete transaction being indicated by the portion of the encryption key stored in the first computer not 
matching any part of the whole portion of the encryption key stored in the second computer , 
wherein the user is not charged duplicate fees associated with starting a new transaction completing the . 
incomplete transaction . 

42. (Previously Presented) The system of claim 41 wherein the first system comprises a client 
system and the second system comprises a server system. 
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43. (Previously Presented) The system of claim 42 wherein the first value of the client system is 
stored in a persistent client-side data file. 

44. (Previously Presented) The system of claim 43 wherein the persistent client-side data file 
comprises a cookie. 

45. (Currently Amended) The system of claim 44 wherein the means for determining further 
comprises: 

means for allowing the server system to compare the first value in the cookie with a part of the second ' 
value in the server system. 

46. (Currently Amended) The system of claim 41 wherein the request represents a new transaction 
if the first value does not match a part of the second value and wherein the system further comprises: 
means in the second system for generating a new encryption key, wherein the new encryption key is 
associated with the new transaction; 

means in the second system for storing a first portion of the new encryption key in the first computer 
system as the first value; and 

means in the second system for storing the whole new encryption key on the second computer system as 
the second value. 

47. (Previously Presented) The system of claim 46 further comprising: 
means for encrypting the requested data with the whole new encryption key; 

means in the second computer system for transmitting the encrypted data from the second 
computer system to the first computer system; and 

means in the second computer system for sending a remaining portion of the new encryption key 
from the second computer system to the first computer system, whereby the first computer system 
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combines the first portion and the remaining portion of the new encryption key to form the whole new 
encryption key and utilizes the whole new encryption key to decrypt the encrypted data. 

48. (Previously Presented) The system of claim 47 further comprising: 

means for allowing the user to provide payment for the whole new encryption key after the encrypted data 
has been transmitted and prior to sending the remaining portion of the new encryption key. 

49. (Currently Amended) The system of claim 41 , wherein the first value is a first portion of an 
encryption key and the second value is a whole encryption key, and the means for completing the 
incomplete transaction comprises: 

means for encrypting the requested data with the whole encryption key; 

means in the second computer system for transmitting the encrypted data from the second computer 
system to the first computer system; and 

means in the second computer system for sending a remaining portion of the encryption key from the 
second computer system to the first computer system, 

whereby the first computer system combines the first portion and the remaining portion of the encryption; 
key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted 
information. 

50. (Previously Presented) The system of claim 49 wherein the means for completing the incomplete 
transaction further includes means for allowing the user to provide payment for the whole encryption key 
after the encrypted data has been transmitted and prior to sending the remaining portion of the encryption 
key. 
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51 . (Currently Amended) A computer readable medium containing program instructions for 
conducting a transaction between a first computer system and a second computer system, the program \ 
instructions for: 

(a) receiving in the second computer system a request from a user of the first computer system to \ 
download data from the second computer system , the data to be encrypted with an encryption key prior to 
being downloaded : 

(b) determining by the second computer system whether the request represents a new transaction or 
an incomplete transaction by comparing a first value stored in the first computer system with a part of a : 
second value stored in the second system , the first value being a portion of the encryption key, the 
second value being a whole portion of the encryption kev : and 

(c) if wherein the request represents an incomplete transaction indicated by the portion of the 
encryption kev stored in the first computer not matching any part of the whole portion of the encryption 
kev stored in the second computer, and completing the incomplete transaction, wherein the user is not ; 
charged duplicate fees associated with starting a new transaction completing the incomplete transaction : 

52. (Previously Presented) The computer readable medium of claim 51 wherein the first system 
comprises a client system and the second system comprises a server system. 

53. (Previously Presented) The computer readable medium of claim 52 wherein the first value of th6 
client system is stored in a persistent client-side data file. 

54. (Previously Presented) The computer readable medium of claim 53 wherein the persistent client- 
side data file comprises a cookie. 

55. (Currently Amended) The computer readable medium of claim 54 wherein instruction b) further 
comprises: 
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b1 ) allowing the server system to compare the first value in the cookie with a part of the second value 
in the server system. 

56. (Currently Amended) The computer readable medium of claim 51 , wherein the request 
represents a new transaction if the first value does not match a part of the second value, the method 
further comprising: 

d) if the request represents a new transaction, generating a new encryption key by the second 
system, wherein the new encryption key is associated with the new transaction; 

e) storing a first portion of the new encryption key in the first computer system as the first value; and 

f) storing the whole new encryption key on the second computer system as the second value. 

57. (Previously Presented) The computer readable medium of claim 56 further comprising: 

g) encrypting the requested data with the whole new encryption key; 

h) transmitting the encrypted data from the second computer system to the first computer system; : : 
and 

i) after the encrypted data has been transmitted, sending a remaining portion of the new encryption 
key from the second computer system to the first computer system, 

wherein the first computer system combines the first portion and the remaining portion of the new 
encryption key to form the whole new encryption key and utilizes the whole new encryption key to decrypt 
the encrypted data. 

58. (Previously Presented) The computer readable medium of claim 57 further comprising: 

j) after the encrypted data has been transmitted and prior to sending the remaining portion of the ) 
new encryption key, allowing the user to provide payment for the whole new encryption key. 
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59. (Previously Presented) The computer readable medium of claim 51 wherein the first value is a \ 
first portion of an encryption key and the second value is a whole encryption key, and instruction c) further 
comprises: 

d ) encrypting the requested data with the whole encryption key; 

c2) transmitting the encrypted data from the second computer system to the first computer system; ) 
and 

c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key 
from the second computer system to the first computer system, whereby the first computer system 
combines the first portion and the remaining portion of the encryption key to form the whole 
encryption key and utilizes the whole encryption key to decrypt the encrypted data. 

60. (Previously Presented) The computer readable medium of claim 59, wherein instruction (c) 
further comprises: 

c4) after the encrypted data has been transmitted and prior to sending the remaining portion of the ) 
encryption key, allowing the user to provide payment for the whole encryption key. 

61 . (Currently Amended) A method for conducting a transaction between a first computer system = : 
and a second computer system, the method comprising the steps of: 

(a) receiving in the second computer system a request from a user of the first computer system to 
download data from the second computer system; 

(b) determining by the second computer system whether the request represents a new transaction or 
an incomplete transaction by comparing a first value stored in the first computer system with a part of a ■ 
second value stored in the second system; and 

(c) if the request represents an incomplete transaction, completing the incomplete transaction, 
wherein the user is not charged duplicate fees associated with starting a new transaction completing the ! 
incomplete transaction : 
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wherein the first value is a first portion of an encryption key and the second value is a whole 
encryption key, and step c) further comprises: 

c1) encrypting the requested data with the whole encryption key; 

c2) transmitting the encrypted data from the second computer system to the first computer system; : 

and 

c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key 
from the second computer system to the first computer system, whereby the first computer system 
combines the first portion and the remaining portion of the encryption key to form the whole encryption 
key and utilizes the whole encryption key to decrypt the encrypted data. 

62. (Currently Amended) A system for conducting a transaction between a first computer system ; 
and a second computer system, the system comprising: 

means in the second computer system for receiving a request from a user of the first computer system to 
download data from the second computer system; 

means for determining by the second computer system whether the request represents a new transaction 
or an incomplete transaction by comparing a first value stored in the first computer system with a part of a 
second value stored in the second system; and 

means for completing the incomplete transaction if the request represents an incomplete transaction, 
wherein the user is not charged duplicate fees associated with starting a new transaction completing the 
incomplete transaction : 

wherein the first value is a first portion of an encryption key and the second value is a whole encryption 
key, and the means for completing the incomplete transaction comprises: 
means for encrypting the requested data with the whole encryption key; 

means in the second computer system for transmitting the encrypted data from the second computer 
system to the first computer system; and 
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means in the second computer system for sending a remaining portion of the encryption key from the 

second computer system to the first computer system, 
whereby the first computer system combines the first portion and the remaining portion of the encryption 
key to form the whole encryption key and utilizes the whole encryption key to decrypt the encrypted 
information. 

63. (Currently Amended) A computer readable medium containing program instructions for 
conducting a transaction between a first computer system and a second computer system, the program • 
instructions for: 

(a) receiving in the second computer system a request from a user of the first computer system to 
download data from the second computer system; 

(b) determining by the second computer system whether the request represents a new transaction or 
an incomplete transaction by comparing a first value stored in the first computer system with a part of a \ 
second value stored in the second system; and 

(c) if the request represents an incomplete transaction, completing the incomplete transaction, 
wherein the user is not charged duplicate fees associated with starting a new transaction completing the : 
incomplete transaction ; 

wherein the first value is a first portion of an encryption key and the second value is a whole encryption : 
key, and instruction c) further comprises: 

c1) encrypting the requested data with the whole encryption key; 

c2) transmitting the encrypted data from the second computer system to the first computer system; i 
and 

c3) after the encrypted data has been transmitted, sending a remaining portion of the encryption key 
from the second computer system to the first computer system, whereby the first computer system ; 
combines the first portion and the remaining portion of the encryption key to form the whole 
encryption key and utilizes the whole encryption key to decrypt the encrypted data. 
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Allowable Subject Matter 

6. Claims 31-63 allowed over the prior art of record. 

7. The following is a statement of reasons for the indication of allowable subject matter: 
The closest prior art of record are; 

U.S. Patent No. 5,963,915 to Steven T. Kirsch, 

U.S Patent No. 6,31 1 ,269 to Gary L Luckenbaugh et al., 

U.S. Patent Publication No. 2001/0002900 A1 to David A. Romreli, 

U.S. Patent No. 5,532,920 to Thomas V. Hartrick. 

Generally all of the prior arts disclose a facility known as persistent client-side cookies that has ;■ 
been introduced to provide a way for server systems to store selected information on client systems. 
Cookies are created at the discretion of the server system in response to specific client URL requests. 
Part of the server response is a cookie consisting of a particularly formatted string of text and numerical • 
information including a cookie identifier, a cookie path, a server domain name and, optionally, an 
expiration date, and a secure marker or any other information that the server can use for identification. 
The cookie is automatically discarded by the client system based on the expiration date. If the secure 
marker is present, then the cookie is only returned to a server system during a secure transaction. Whei^e 
a URL client request made by the client, the cookie paths and domain names of cookies stored by the 
client are compared with those of the URL request. Cookies with matching paths and domain names are 
passed with the client URL request to the server system. Any text associated with the identifier is also ; 
passed back to the server system. 

8. In regards to independent claims 31 , 41, 51 , and 61-63 the closes prior arts of record when taken 
either individually or in combination with other prior arts of record fail to teach or suggest that a key is 
used in encryption of the requested data and portion of such key is utilized within the cookie that is sent \ 
from the server to the client as a marker for transaction and this cookie is used identify a transaction as \ 
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either an incomplete or lack of such information in a storage at the server indicating a new transaction as 
provided in the step of; 

(b) determining by the second computer system whether the request represents a new 
transaction or an incomplete transaction by comparing a first value stored in the first computer system \ 
with a part of a second value stored in the second system , the first value being a portion of the encryption 
key, the second value being a whole portion of the encryption kev : and 

(c) if wherein the request represents an incomplete transaction indicated by the portion of ■ 
the encryption kev stored in the first computer not matching any part of the whole portion of the 
encryption kev stored in the second computer, and completing the incomplete transaction, wherein the \ 
user is not charged duplicate fees associated with starting a new transaction completing the incomplete ; 
transaction . 

9. Claims 32-40 are dependent upon claim 31 , claims 42-50 are dependent upon claim 41 , and 
claims 52-60 are dependent upon claim 51 , thus they all have the limitations of independent claims 31 , 
41 , and 51 , therefore, they are allowable for that same reason stated above. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Kambiz Abdi whose telephone number is ((571)272-6702. The examiner can normally be: 
reached on 10 AM to 6:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Trammell P. James can be reached on (571)272-6712. The fax phone number for the organization where 
this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-21 7-9197 (toll-free). 
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